shortstop - npm Package Compare versions

Comparing version 1.0.3 to 1.0.4

CHANGELOG.md

@@ -0,1 +1,11 @@
+##### v1.0.4 - 20240729
+
+- publish new patch version to override errant v1.0.3
+
+##### v1.0.2 - 20230213
+
+**Security**
+
+- upgrade async module to resolve vulnerability. https://github.com/krakenjs/shortstop/issues/28
+
 ##### v0.0.1 - 2013xxxx
@@ -2,0 +12,0 @@ **Bugs**

index.js

 /*───────────────────────────────────────────────────────────────────────────*\
-│  Copyright (C) 2014 eBay Software Foundation                                │
+│  Copyright (C) 2023 PayPal                                                  │
 │                                                                             │
@@ -29,3 +29,5 @@ │hh ,'""`.                                                                    │
     var ext = path.extname(file);
-    return ext === '' || require.extensions.hasOwnProperty(ext);
+    // in order for this to work after deprecation of module.extensions
+    var extensions = {'.js': true, '.json': true, '.node': true}
+    return ext === '' || extensions.hasOwnProperty(ext);
 }
@@ -32,0 +34,0 @@

lib/resolver.js

 /*───────────────────────────────────────────────────────────────────────────*\
-│  Copyright (C) 2014 eBay Software Foundation                                │
+│  Copyright (C) 2023 PayPal                                                  │
 │                                                                             │
@@ -4,0 +4,0 @@ │hh ,'""`.                                                                    │

LICENSE.txt

 /*───────────────────────────────────────────────────────────────────────────*\
-│  Copyright (C) 2014 eBay Software Foundation                                │
+│  Copyright (C) 2023 PayPal                                                  │
 │                                                                             │
@@ -17,2 +17,2 @@ │hh ,'""`.                                                                    │
 │   limitations under the License.                                            │
-\*───────────────────────────────────────────────────────────────────────────*/
+\*───────────────────────────────────────────────────────────────────────────*/

package.json

 {
   "name": "shortstop",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Enable use of protocols (such as file:, buffer:, or method:) in configuration files.",
@@ -36,5 +36,5 @@ "main": "index.js",
   "dependencies": {
-    "core-util-is": "~1.0.1",
-    "async": "~0.2.10"
+    "async": "^3.2.4",
+    "core-util-is": "~1.0.1"
   }
 }

README.md

@@ -1,6 +0,3 @@
-shortstop
-=========
+# shortstop
 
-Lead Maintainer: [Poornima Venkat](https://github.com/pvenkatakrishnan/)
-
 [![Build Status](https://travis-ci.org/krakenjs/shortstop.svg?branch=master)](https://travis-ci.org/krakenjs/shortstop)  
@@ -7,0 +4,0 @@

SECURITY.md

@@ -7,3 +7,3 @@ # Security Policy
 ## Contact us
-If you think you may have found a security bug we ask that you privately send the details to [e-mail]. Please make sure to use a descriptive title in the email.
+If you think you may have found a security bug we ask that you privately send the details to [e-mail]. Please make sure to use a descriptive title in the email.
 
@@ -10,0 +10,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

19589

increased by0.48%

Lines of code

217

increased by0.93%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of package files

9

decreased by-10%

Number of lines in readme file

146

decreased by-2.01%

Dependency changes

• + Addedasync@3.2.6(transitive)

• - Removedasync@0.2.10(transitive)

• Updatedasync@^3.2.4